@simpleapps-com/augur-api 2026.5.5 → 2026.5.6

package/dist/index.d.mts

@@ -172,7 +172,14 @@ declare class RateLimitError extends AugurError {
         endpoint: string;
     });
 }
+declare class InvalidArgumentError extends AugurError {
+    constructor(params: {
+        message: string;
+        service: string;
+        endpoint: string;
+    });
+}
 
-declare const VERSION = "2026.5.5";
+declare const VERSION = "2026.5.6";
 
-export { AugurAPI, type AugurAPIError, AugurError, AuthenticationError, type CrossSiteAuthParams, type CrossSiteAuthResult, NotFoundError, RateLimitError, VERSION, ValidationError, authenticateUserForSite, createCrossSiteAuthenticator };
+export { AugurAPI, type AugurAPIError, AugurError, AuthenticationError, type CrossSiteAuthParams, type CrossSiteAuthResult, InvalidArgumentError, NotFoundError, RateLimitError, VERSION, ValidationError, authenticateUserForSite, createCrossSiteAuthenticator };

package/dist/index.d.ts

@@ -172,7 +172,14 @@ declare class RateLimitError extends AugurError {
         endpoint: string;
     });
 }
+declare class InvalidArgumentError extends AugurError {
+    constructor(params: {
+        message: string;
+        service: string;
+        endpoint: string;
+    });
+}
 
-declare const VERSION = "2026.5.5";
+declare const VERSION = "2026.5.6";
 
-export { AugurAPI, type AugurAPIError, AugurError, AuthenticationError, type CrossSiteAuthParams, type CrossSiteAuthResult, NotFoundError, RateLimitError, VERSION, ValidationError, authenticateUserForSite, createCrossSiteAuthenticator };
+export { AugurAPI, type AugurAPIError, AugurError, AuthenticationError, type CrossSiteAuthParams, type CrossSiteAuthResult, InvalidArgumentError, NotFoundError, RateLimitError, VERSION, ValidationError, authenticateUserForSite, createCrossSiteAuthenticator };

package/dist/index.js

@@ -45,6 +45,7 @@ __export(index_exports, {
   CustomersClient: () => CustomersClient,
   GregorovichClient: () => GregorovichClient,
   HealthCheckDataSchema: () => HealthCheckDataSchema,
+  InvalidArgumentError: () => InvalidArgumentError,
   ItemsClient: () => ItemsClient,
   JoomlaClient: () => JoomlaClient,
   LegacyClient: () => LegacyClient,
@@ -184,6 +185,15 @@ var RateLimitError = class extends AugurError {
     });
   }
 };
+var InvalidArgumentError = class extends AugurError {
+  constructor(params) {
+    super({
+      ...params,
+      code: "INVALID_ARGUMENT",
+      statusCode: 400
+    });
+  }
+};
 
 // src/core/client.ts
 function generateRequestKey(method, url, params) {
@@ -506,6 +516,39 @@ var HTTPClient = class {
   }
 };
 
+// src/core/path-validation.ts
+var normalise = (name) => name.replace(/[-_]/g, "").toLowerCase();
+var NUMERIC_EXACT = /* @__PURE__ */ new Set(["id", "linenumber"]);
+var NUMERIC_SUFFIX_RE = /(?:id|uid|no|num|number)$/;
+var STRING_OVERRIDES = /* @__PURE__ */ new Set(["siteid", "pono", "importuid", "scheduledimportmasteruid"]);
+var isNumericPlaceholder = (placeholder) => {
+  const normalised = normalise(placeholder);
+  if (STRING_OVERRIDES.has(normalised)) return false;
+  if (NUMERIC_EXACT.has(normalised)) return true;
+  return NUMERIC_SUFFIX_RE.test(normalised);
+};
+var INTEGER_RE = /^-?\d+$/;
+var validatePathSegment = (pathTemplate, placeholder, value) => {
+  const isNumeric = isNumericPlaceholder(placeholder);
+  if (isNumeric) {
+    if (!INTEGER_RE.test(value)) {
+      throw new InvalidArgumentError({
+        message: `Invalid path parameter '${placeholder}': expected an integer, received ${JSON.stringify(value)}`,
+        service: "http-client",
+        endpoint: pathTemplate
+      });
+    }
+    return;
+  }
+  if (value === "") {
+    throw new InvalidArgumentError({
+      message: `Invalid path parameter '${placeholder}': expected a non-empty string, received ${JSON.stringify(value)}`,
+      service: "http-client",
+      endpoint: pathTemplate
+    });
+  }
+};
+
 // src/core/schemas.ts
 var v = __toESM(require("valibot"));
 var logNormalizationWarning = (message) => {
@@ -1053,16 +1096,19 @@ Provided parameters: ${JSON.stringify(params, null, 2)}`;
     if (!pathParams) {
       return pathTemplate;
     }
-    const normalise = (s) => s.replace(/[-_]/g, "").toLowerCase();
+    const normalise2 = (s) => s.replace(/[-_]/g, "").toLowerCase();
     let path = pathTemplate;
     for (const [key, value] of Object.entries(pathParams)) {
+      const stringValue = String(value);
       if (path.includes(`{${key}}`)) {
-        path = path.replace(`{${key}}`, String(value));
+        validatePathSegment(pathTemplate, key, stringValue);
+        path = path.replace(`{${key}}`, stringValue);
       } else {
-        const normKey = normalise(key);
+        const normKey = normalise2(key);
         path = path.replace(/\{([^}]+)\}/g, (match, placeholder) => {
-          if (normalise(placeholder) === normKey) {
-            return String(value);
+          if (normalise2(placeholder) === normKey) {
+            validatePathSegment(pathTemplate, placeholder, stringValue);
+            return stringValue;
           }
           return match;
         });
@@ -14276,7 +14322,7 @@ function createCrossSiteAuthenticator(augurInfoToken) {
 }
 
 // src/index.ts
-var VERSION = "2026.5.5";
+var VERSION = "2026.5.6";
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   AgrInfoClient,
@@ -14294,6 +14340,7 @@ var VERSION = "2026.5.5";
   CustomersClient,
   GregorovichClient,
   HealthCheckDataSchema,
+  InvalidArgumentError,
   ItemsClient,
   JoomlaClient,
   LegacyClient,